Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-95512 2 Freetype, Redhat 6 Freetype, Build Of Openjdk 11 Els, Enterprise Linux and 3 more 2026-10-04 5.5 Medium
A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.